Search in sources :

Example 31 with Book

use of org.apache.cxf.systest.jaxrs.security.Book in project cxf by apache.

the class JAXRSJwsJsonTest method testJwsJsonBookDoubleHmacManyProps.

@Test
public void testJwsJsonBookDoubleHmacManyProps() throws Exception {
    String address = "https://localhost:" + PORT + "/jwsjsonhmac2";
    List<String> properties = new ArrayList<>();
    properties.add("org/apache/cxf/systest/jaxrs/security/secret.jwk.properties");
    properties.add("org/apache/cxf/systest/jaxrs/security/secret.jwk.hmac.properties");
    Map<String, Object> map = new HashMap<>();
    map.put(JoseConstants.RSSEC_SIGNATURE_OUT_PROPS, properties);
    map.put(JoseConstants.RSSEC_SIGNATURE_IN_PROPS, "org/apache/cxf/systest/jaxrs/security/secret.jwk.hmac.properties");
    BookStore bs = createBookStore(address, map, null);
    Book book = bs.echoBook(new Book("book", 123L));
    assertEquals("book", book.getName());
    assertEquals(123L, book.getId());
}
Also used : BookStore(org.apache.cxf.systest.jaxrs.security.jose.BookStore) HashMap(java.util.HashMap) Book(org.apache.cxf.systest.jaxrs.security.Book) ArrayList(java.util.ArrayList) Test(org.junit.Test)

Example 32 with Book

use of org.apache.cxf.systest.jaxrs.security.Book in project cxf by apache.

the class JAXRSJwsMultipartTest method testJwsJwkBookHMacMultipartModified.

@Test(expected = BadRequestException.class)
public void testJwsJwkBookHMacMultipartModified() throws Exception {
    String address = "https://localhost:" + PORT + "/jwsjwkhmacModified";
    BookStore bs = createJwsBookStoreHMac(address, false, false);
    bs.echoBookMultipartModified(new Book("book", 123L));
}
Also used : BookStore(org.apache.cxf.systest.jaxrs.security.jose.BookStore) Book(org.apache.cxf.systest.jaxrs.security.Book) Test(org.junit.Test)

Example 33 with Book

use of org.apache.cxf.systest.jaxrs.security.Book in project cxf by apache.

the class JAXRSJwsMultipartTest method testJwsJwkBooksHMacMultipart.

@Test
public void testJwsJwkBooksHMacMultipart() throws Exception {
    String address = "https://localhost:" + PORT + "/jwsjwkhmac";
    BookStore bs = createJwsBookStoreHMac(address, false, false);
    List<Book> books = new LinkedList<Book>();
    books.add(new Book("book", 123L));
    books.add(new Book("book2", 124L));
    List<Book> returnBooks = bs.echoBooksMultipart(books);
    assertEquals("book", returnBooks.get(0).getName());
    assertEquals(123L, returnBooks.get(0).getId());
    assertEquals("book2", returnBooks.get(1).getName());
    assertEquals(124L, returnBooks.get(1).getId());
}
Also used : BookStore(org.apache.cxf.systest.jaxrs.security.jose.BookStore) Book(org.apache.cxf.systest.jaxrs.security.Book) LinkedList(java.util.LinkedList) Test(org.junit.Test)

Example 34 with Book

use of org.apache.cxf.systest.jaxrs.security.Book in project cxf by apache.

the class JAXRSJwsMultipartTest method testJwsJwkBookHMacMultipartJwsJson.

@Test
public void testJwsJwkBookHMacMultipartJwsJson() throws Exception {
    String address = "https://localhost:" + PORT + "/jwsjwkhmacJwsJson";
    BookStore bs = createJwsBookStoreHMac(address, false, true);
    Book book = bs.echoBookMultipart(new Book("book", 123L));
    assertEquals("book", book.getName());
    assertEquals(123L, book.getId());
}
Also used : BookStore(org.apache.cxf.systest.jaxrs.security.jose.BookStore) Book(org.apache.cxf.systest.jaxrs.security.Book) Test(org.junit.Test)

Example 35 with Book

use of org.apache.cxf.systest.jaxrs.security.Book in project cxf by apache.

the class JweJwsAlgorithmTest method testBadEncryptingKey.

@org.junit.Test
public void testBadEncryptingKey() throws Exception {
    URL busFile = JweJwsAlgorithmTest.class.getResource("client.xml");
    List<Object> providers = new ArrayList<>();
    providers.add(new JacksonJsonProvider());
    providers.add(new JweWriterInterceptor());
    String address = "http://localhost:" + PORT + "/jweoaepgcm/bookstore/books";
    WebClient client = WebClient.create(address, providers, busFile.toString());
    client.type("application/json").accept("application/json");
    Map<String, Object> properties = new HashMap<>();
    properties.put("rs.security.keystore.type", "jwk");
    properties.put("rs.security.keystore.alias", "AliceCert");
    properties.put("rs.security.keystore.file", "org/apache/cxf/systest/jaxrs/security/certs/jwkPublicSet.txt");
    properties.put("rs.security.encryption.content.algorithm", "A128GCM");
    properties.put("rs.security.encryption.key.algorithm", "RSA-OAEP");
    WebClient.getConfig(client).getRequestContext().putAll(properties);
    Response response = client.post(new Book("book", 123L));
    assertNotEquals(response.getStatus(), 200);
}
Also used : Response(javax.ws.rs.core.Response) HashMap(java.util.HashMap) JweWriterInterceptor(org.apache.cxf.rs.security.jose.jaxrs.JweWriterInterceptor) Book(org.apache.cxf.systest.jaxrs.security.Book) JacksonJsonProvider(com.fasterxml.jackson.jaxrs.json.JacksonJsonProvider) ArrayList(java.util.ArrayList) WebClient(org.apache.cxf.jaxrs.client.WebClient) URL(java.net.URL)

Aggregations

Book (org.apache.cxf.systest.jaxrs.security.Book)114 WebClient (org.apache.cxf.jaxrs.client.WebClient)94 URL (java.net.URL)85 HashMap (java.util.HashMap)74 Response (javax.ws.rs.core.Response)73 JacksonJsonProvider (com.fasterxml.jackson.jaxrs.json.JacksonJsonProvider)64 ArrayList (java.util.ArrayList)60 Test (org.junit.Test)36 JwtClaims (org.apache.cxf.rs.security.jose.jwt.JwtClaims)34 JwtAuthenticationClientFilter (org.apache.cxf.rs.security.jose.jaxrs.JwtAuthenticationClientFilter)32 JwtToken (org.apache.cxf.rs.security.jose.jwt.JwtToken)28 WebApplicationException (javax.ws.rs.WebApplicationException)15 JweWriterInterceptor (org.apache.cxf.rs.security.jose.jaxrs.JweWriterInterceptor)15 BookStore (org.apache.cxf.systest.jaxrs.security.jose.BookStore)15 Bus (org.apache.cxf.Bus)12 SpringBusFactory (org.apache.cxf.bus.spring.SpringBusFactory)12 JAXRSClientFactoryBean (org.apache.cxf.jaxrs.client.JAXRSClientFactoryBean)12 JwsWriterInterceptor (org.apache.cxf.rs.security.jose.jaxrs.JwsWriterInterceptor)12 ZonedDateTime (java.time.ZonedDateTime)10 ClientAccessToken (org.apache.cxf.rs.security.oauth2.common.ClientAccessToken)10